rule aix {
  meta:
    author = "Tim Brown @timb_machine"
    description = "Hunts for AIX binaries"
  strings:
    $libca = "libc.a"
    $text = ".text"
    $data = ".data"
  condition:
    $libca and $text and $data
}
